Civictheme Design System CVEs and Security Vulnerabilities

CVE-2025-12082

CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Drupal Salsa.digital

Products

Civictheme Design System Drupal Civictheme Design System

CVE-2025-12083

CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed